Cookies and Dark Patterns: UK ICO Warns Top Publishers of Coming Enforcement

Disclaimer: The information and examples provided here are for informational purposes only and are not meant as legal advice.  On 21 November 2023 the UK’s Information Commissioner’s Office (ICO) publicized that it had issued a final warning to Britain’s top websites about coming into compliance with the

White House to AI Companies: We're Watching Closely and Will Act

President Biden's landmark Executive Order concerning AI technologies sends a strong signal to Big AI Tech and federal agencies that fostering the technology's potential for the greater good… while mitigating its great potential harms is a key White House priority.    Wide-ranging motivators On the one hand, the EO tackles concerns

2000s Called and Want Their Ad Farms Back

According to a recent programmatic advertising transparency study by the ANA nearly a quarter of all ad views are from websites made solely to sell ads. This is problematic for industry and users.

California’s ‘Delete Act’: The Loopholes Swallow The Law

[Disclaimer: The below contents are the personal opinion of the author, and should not be interpreted as legal advice.] California’s attempt to regulate data brokers through SB 362, aka the CA ‘Delete Act’,  is unlikely to have the effect of dramatically reducing third party marketing offers, at least the

Life in the Sandbox

If you work in digital advertising, then you will have heard the dramatic exclamations of “Cookie-geddon” and “Cookie-pocalypse,” both referring to Google’s plans to depreciate all third-party cookies in Chrome in the second half of 2024. The deprecation of the cookies on Chrome, and the development of Google's alternative,

Rejecting Harm: UK Regulators Crack Down on Design Dark Patterns

It might be expected that a joint announcement in the depths of August from the ‘UK's independent body set up to uphold information rights’ and the UK Government authority ‘set up to make markets work well for consumers, businesses and the economy’ might fly under the radar. And so it

Lucid releases China Personal Information Protection Law (PIPL) Readiness Record

China's Personal Information Protection Law (PIPL) is part of a complex legal framework aimed at safeguarding the personal information of Chinese citizens. Enacted on November 1, 2021, the PIPL reflects China's growing concern over data privacy and geopolitical issues, and shares many similarities with the EU GDPR. To help you

Unveiling Connections: A Comparative Analysis of EU GDPR and India’s DPDP

India’s Digital Personal Data Protection (DPDP) became law as of August 11, 2023 focusing on personal data management, consent, cross-border transfers, and establishing the Data Protection Board. While inspired by the European Union’s GDPR, India's approach showcases distinct deviations. These contrasts encompass factors such as more specific criteria

Lucid releases EU-US Data Privacy Framework Readiness Record

On July 10, 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework (DPF), administered by the U.S.  Department of Commerce’s (DoC) International International Trade Administration (ITA). As of July 17, 2023 the DPF Program began accepting new participating businesses. To help you

AI Regulation: US, UK and other approaches

We continue our four-part deep dive into the future of AI regulation, by examining some contrasting regulatory approaches that are rapidly developing in other global jurisdictions, including the UK, the US, China and India.

TCF V2.2 offers panacea for publishers, if they want it

Over the last few weeks, the IAB Europe (IAB EU) have been running rather dry, but wholly necessary and informative webinars explaining what the changes within the Transparency Consent Framework Version 2.2 (TCFv2.2), due in September 2023, will mean for vendors, consent management platforms (CMPs) and publishers. Some

Through Orange Haze: Recapping IAB Tech Lab’s Summit in NYC

Earlier this month I had the pleasure of attending IAB Tech Lab’s IMPACT conference in midtown Manhattan. Digital advertising professionals gathered together to discuss pressing issues and learn from industry specialists, catch up with friends and clients, and fret about the Blade Runner-esque air conditions outside. The irony of

US Health Data Privacy Landscape and its Ripple Effect

In 2023, the privacy race has expanded to include healthcare data, with states like Washington, Connecticut, and Nevada introducing data-specific bills to protect consumers of wellness services beyond the traditional confines of America’s healthcare system. This is in parallel to states like Illinois’ interest in biometric data privacy, with

Journey to the West: China SCCs and the Transfer Impact Assessment (PIPIA)

As of 1st June 2023, data exports from China can (in some cases) be facilitated using SCCs and PIPIAs (Chinese TIAs). Lucid Privacy Group provides the details and a PIPIA template.

Artificial Intelligence, Regulation, Privacy

In this four-part deep dive into the future of AI regulation, Lucid Privacy Group explores the detail of the new approaches to AI regulation.

First Apple, Now Android to Devs: “Delete!”

It’s all too easy for us to download an app, speed through registration with our Google accounts, use the service for a month and then put it in the smartphone equivalent of a junk drawer. Rifling through on a whim, we may decide to throw the app away to,

Fired Pixels Under Fire

The 2010s were a time of ‘novel’ patent lawsuits. It seemed like every company was being sued by Tom, Shrek & Harry LLP for sending hyperlinks to mobile users. You know, to service terms and coupons and such. The cardinal sin? Allegedly infringing an old patent. The lawsuits were frivolous to

Who needs a DPO?

The European Data Protection Board (EDPB) has announced a Pan EU coordinated enforcement action by 26 separate Data Protection Authorities (DPA) on the designation of Data Protection Officers (DPOs). This ‘action’ will address the status of DPOs within their organization, including whether they have the resources to carry out their

Lucid releases Utah Readiness Record (UCPA)

The Utah Consumer Privacy Act (UCPA) made Utah the fourth US state to pass a comprehensive privacy law, and the law will become effective on December 31 of this year.  To help you keep pace with the law, and to help you evaluate whether your business meets thresholds of applicability,

Lucid releases Connecticut Readiness Record (CDPA)

July 1, 2023, is now the most famous date on the calendar for privacy professionals in the US, and Connecticut has elbowed in on the fun.  While the Connecticut Data Privacy Act (CTDPA) will become effective on July 1 of this year, the law includes a grace period for enforcemement

Lucid releases Colorado Readiness Record (CPA)

On July 1 2023, the Colorado Privacy Act (CPA) will come into effect.  In fact, July is shaping up to be a banner month, as the Connecticut law will also take effect and CPRA in California is expected to commence enforcement.  We’re hearing indications that letters will be mailed

Europe’s Digital Services Act

The European Union’s Digital Services Act (DSA) came into force in November 2022, & will be fully applicable for all entities from 17 February 2024. However, before the date of enforcement, the work has begun in earnest within the European Commission (EC) to interpret, clarify and implementate what the legislation

Hiding of Behavioural Advertising, in Terms of Service, is called into question under GDPR standards

2023 started with a serious blow to behavioral advertising. Irish Data Protection Authority (IE DPA) issued a decision to Meta that put its Behavioral Advertising under high scrutiny. This decision was handed down to Irish DPA from the European Data Protection Board (EDPB) and is an outcome of the dispute

Lucid releases Virginia Readiness Record (VCDPA)

On January 1st of this year, the Virginia Consumer Data Protection Act (VCDPA) officially came into force.  To help you keep pace with the law, and to help you evaluate whether your business meets thresholds of applicability, Lucid is releasing our Virginia Readiness Record (VCDPA) as a public reference.  As

Lucid Privacy Survey Finds That The Majority Of AdTech Businesses Plan To Honor Opt-Out Preference Signals Globally

Following the recent passage of new privacy laws in California, Colorado and Connecticut that will require businesses to honor ‘Do Not Sell or Share’ of targeted advertising opt-out requests via “opt-out preference signals’ or (‘signals’) (aka; ‘global privacy controls’ or ‘GPC’),”  there has been some uncertainty on h0w these opt-out